NIST Privacy Framework, Control-PCT.DM-P2

Provide a data subject their personal data in a structured, commonly used, machine readable format on request, and transmit it directly to another controller where technically feasible.

Give a data subject their data in a structured, commonly used, machine-readable format and transmit it to another controller on request where processing rests on consent or a contract and is automated.

Give a data subject their personal data in a structured, commonly used, machine readable format on request, and let them transmit it to another controller without obstruction, where the processing rests on consent or a contract and is carried out by automated means.

Give a person their personal data in a structured, commonly used electronic format on request, and forward it to another system where the processing rests on consent or a contract.

Give a data subject whose processing rests on consent or a contract and uses automated means their data in a structured, commonly used, machine-readable format on request, and transmit it directly to another controller where technically possible.

Give a data subject a structured, commonly used, machine readable and interoperable copy of their personal data, and transmit it to another responsible party at their request, where the processing rests on their consent and is automated.

Give a data subject their personal data in a structured, commonly used and machine-readable format on request, free of charge and without excessive delay, and transmit it directly to another controller or processor where that is technically possible.

Upon request by a user, or by a party acting on behalf of a user, make readily available data, as well as the relevant metadata necessary to interpret and use those data, available to a third party without undue delay, of the same quality as is available to the data holder, easily, securely, free of charge to the user, in a comprehensive, structured, commonly used and machine-readable format and, where relevant and technically feasible, continuously and in real-time, in accordance with Articles 8 and 9 (Article 5(1)).

Let a natural person, or their representative under Article 4(2), download free of charge an electronic copy of at least their personal electronic health data in the priority categories of Article 14, through the electronic health data access services, in the European electronic health record exchange format of Article 15 (Article 3(2)).

Honor a natural person's right to give access to, or to request a healthcare provider to transmit, all or part of their personal electronic health data to another healthcare provider of their choice immediately, free of charge and without hindrance from the healthcare provider or from the manufacturers of the systems the healthcare provider uses (Article 7(1)).

Honor a person performing platform work's right to the portability of personal data generated through their performance of work in the context of your automated monitoring systems or automated decision-making systems, including ratings and reviews: provide them, free of charge, with tools to facilitate the effective exercise of that right and of their portability rights under Article 20 of Regulation (EU) 2016/679, and, where the person so requests, transmit the data directly to a third party (Article 9(6)).